Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/bKLdfcNv2d3RW5LRfCJnuTjJxQ0.roa
File: bKLdfcNv2d3RW5LRfCJnuTjJxQ0.roa (raw, json)
Hash identifier: 2ZXP73piXltObhsphiod8D3LZHymatB9FrzcHwBjVz4=
Subject key identifier: 6C:A2:DD:7D:C3:6F:D9:DD:D1:5B:92:D1:7C:22:67:B9:38:C9:C5:0D
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0190C1711F6E5CF673F1F8190E0817B18D9D
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/bKLdfcNv2d3RW5LRfCJnuTjJxQ0.roa
Signing time: Wed 17 Jul 2024 16:05:34 +0000
ROA not before: Wed 17 Jul 2024 16:05:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 63902
IP address blocks: 109.176.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 18 Aug 2024 09:37:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c1:71:1f:6e:5c:f6:73:f1:f8:19:0e:08:17:b1:8d:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 17 16:05:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ca2dd7dc36fd9ddd15b92d17c2267b938c9c50d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:15:a4:04:0b:3f:9d:e9:31:9f:ec:97:e6:8a:
1b:de:c4:26:7e:2f:c0:0a:00:34:4e:08:ad:8c:dd:
f6:88:1c:65:61:b0:d7:2e:6d:e0:bc:87:3c:07:12:
da:c9:91:de:8f:48:b2:f0:63:6a:d7:67:21:5b:d5:
b1:86:75:65:e5:09:98:1f:ea:76:d4:96:44:ad:f3:
54:94:f7:7e:c2:7f:0b:ef:dd:b9:1f:f5:f8:d5:6e:
ad:98:55:09:e1:a1:d0:a2:a2:38:9b:db:11:7c:fc:
c2:10:61:c7:d1:0c:ad:5f:bb:3d:ef:05:d4:67:92:
05:ee:46:76:2c:af:76:83:18:c7:d4:48:25:45:7c:
19:1b:31:dc:b8:7b:a2:96:ec:94:d6:74:18:7f:a6:
93:26:36:2e:01:53:df:1a:f9:c0:a5:f0:0a:0a:9e:
d4:83:46:8c:7f:a5:a8:5f:97:d4:10:c3:e7:77:ae:
5b:57:6a:f3:ab:30:a2:2f:61:7d:49:59:ce:e8:23:
7a:53:d2:37:99:ef:db:50:63:ca:60:36:2a:fe:56:
12:14:6a:40:0c:f8:bd:b4:07:4f:59:2b:ee:b4:97:
1d:eb:30:e3:5e:67:55:8c:01:b5:f7:f0:1e:40:91:
60:20:64:e9:0c:20:b7:95:dd:38:c1:ea:0f:56:9f:
21:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A2:DD:7D:C3:6F:D9:DD:D1:5B:92:D1:7C:22:67:B9:38:C9:C5:0D
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/bKLdfcNv2d3RW5LRfCJnuTjJxQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.203.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:8d:b8:ca:69:e0:fb:aa:88:a1:bc:08:15:af:1e:93:bd:53:
4a:5c:ce:09:e0:12:4d:f6:6d:9b:90:aa:62:fb:94:09:71:fc:
61:6c:75:30:a1:56:00:4e:f0:10:e6:c8:81:26:21:c2:d4:b4:
06:79:25:da:30:85:7c:31:2b:67:7b:1a:f2:73:da:5b:9f:fb:
c5:36:f3:b0:ee:03:85:2f:f7:15:d7:d5:68:04:3c:7c:c8:5c:
63:57:5c:fc:74:45:d2:3a:73:43:01:1d:d0:f1:98:8e:5c:05:
75:cd:68:da:9a:d9:24:b0:41:86:93:6e:41:d4:26:93:ee:6c:
fc:8e:67:9d:03:9f:8f:f2:8b:51:87:f7:3a:b8:d7:0c:21:f2:
ba:ae:ae:cb:f4:1c:61:da:6a:4e:79:e9:c4:d4:90:82:7c:df:
ac:52:c6:81:74:0e:e7:21:dc:75:51:72:7b:21:3c:8f:5c:97:
21:32:82:29:8a:9a:35:cd:6a:32:f2:a5:79:0b:3a:57:0e:0d:
46:6c:89:57:66:f2:9d:ab:41:70:2b:68:9a:6f:4e:a9:4a:23:
19:cc:82:6b:0d:ca:37:c3:c8:3a:71:84:b4:e3:03:11:f0:9b:
56:0c:dd:06:06:3c:8d:e1:55:e9:79:ab:d8:e8:46:3b:3e:1e:
df:7f:0e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:30:20 2025 by rpki-client